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and integrated circuit (12) which contains biometric data relating to the user 
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includes a scanner for scanning the biometric data such as a thumbprint of 
the user so that the scan data can be compared with the data read from the 
card to establish the user's authenticity. The comparison can take place in 
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includes a plurality of separate data storage locations D1 to Dn for storing 
separate data parcels and includes separate programs P1 to Pn each for 
accessing one of the storage locations D1 to Dn. Upon receipt of an 
appropriate authorisation code, one or more of the programs P1 to Pn is 
activated to access only data in the corresponding storage location D1 to Dn 
so that only that data is read from the card. 
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(57) Abstract 

An identification storage medium such as a card (10) is disclosed. The card (10) contains data relating to a user such as credit 
card information, EFTPOS information, licence information or the like. The card (10) includes and integrated circuit (12) which contains 
biometric data relating to the user and which can be read from the card by a reader (20, 70). The reader also includes a scanner for scanning 
the biometric data such as a thumbprint of the user so that the scan data can be compared with the data read from the card to establish the 
user's authenticity. The comparison can take place in the circuit (12) or in the reader. The integrate circuit (12) preferably also includes 
a plurality of separate data storage locations Dl to Dn for storing separate data parcels and includes separate programs PI to Pn each for 
accessing one of the storage locations Dl to Dn. Upon receipt of an appropriate authorisation code, one or more of the programs PI to Pn 
is activated to access only data in the corresponding storage location Dl to Dn so that only that data is read from the card. 
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1 

IDENTIFICATION STORAGE MEDIUM AND SYSTEM AND 
METHOD FOR PROVIDING ACCESS TO AUTHORISED USERS 

This invention relates to an identification storage medium 
5 and to a system and method for providing access to 
authorised users. 

EFTPOS (Electronic Funds Transfer Point) terminals have 
operated for many years whereby a card is swiped through 

10 the device so a card reader can read data on the card to 
obtain account details. Usually an account type and a 
personal identification number are entered by the user and 
the information is transmitted to a facility, usually a 
bank or other finance establishment , for electronic 

15 authorisation. The information is processed through a pin 
pad which encrypts the personal identification number 
details for data security. The data is sent via a modem 
through specialised phone lines to a transactions switching 
network, where it is switched through the correct banks, 

2 0 host computers to obtain bank authorisation. Once 

authorisation is provided a financial transaction is 
allowed to proceed whereby a user may purchase goods or 
obtain cash. 

25 Cards including encrypted data are also used for providing 
access to secure premises or secure areas as well as for 
conducting financial transactions. In order to provide 
access to a secured area a user may swipe the card through 
a card reader and enter a pin number which, if a match is 

3 0 obtained with information read from the card, grants access 

to the secure area. 

As the worldwide use of financial transaction cards such as 
credit /debit cards has increased the incidence of card 
35 fraud has also increased. This fraud results in a multi- 
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million dollar loss to both the banks and the credit 
companies, which in turn is passed on to users in the form 
of charges. To combat this fraud, card manufacturers have 
utilised a number of different methods to assure security, 
5 including tamper-proof signature strips, holograms, 

personal identification numbers (as discussed above) and 
photo identification. Unfortunately, all of these methods 
have only managed to provide a brief respite and have had 
no significant effect on the operations of the organised 
10 counterfeiting rings. 

The object of this invention is to provide a storage medium 
and system and method for providing access which are cost 
effective and which also provide the required security. 

15 

The reference to the provision of access in this 
specification should be understood to mean access to a 
financial transaction by way of transfer of funds to 
purchase goods or receipt of cash, personal identification 
20 such as date of birth, licence details etc, or physical 
access to secured premises or areas. 

The invention may be said to reside in an identification 
storage medium, including: 
25 a support member; and 

circuit means supported by the support member for 
storing biometric data relating to an authorised user of 
the medium. 

30 Preferably the biometric data is a fingerprint template of 
the user. However, in other embodiments the biometric data 
may comprise other biological information such as DNA 
information and/or iris information or the like which may 
be stored and compared. 
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Preferably the storage medium comprises a plastic card 
similar in size and shape to a credit card. 

Preferably the circuit means comprises an integrated 
circuit chip supported by the body of the credit card. 

The invention may also be said to reside in an 
identification system for providing access to an authorised 
user, including: 

a storage medium having a support member, and 

« 

circuit means supported by the support member for 
storing biometric data relating to the authorised user; 

a sensor for access by a user to provide 
biometric data to the system; and 

processing means for comparing the biometric data 
stored in the circuit means with that detected by the 
sensor and for providing an access signal in the case of a 
match to thereby grant access to the authorised user. 

The invention may also be said to reside in an 
identification method for providing access to an authorised 
user, including: 

storing biometric data relating to an authorised 
user on a storage medium; 

comparing the biometric data stored on the 
storage medium with biometric data provided by a user; and 

granting access to the authorised user in the 
case of a match between the data stored on the storage 
medium and that provided by the user. 

In preferred embodiments of the invention the storage 
medium comprises a financial transaction identification 
card and the card may include additional data relating to 
account details. The additional data may be included in 
the circuit means which contains the biometric data or may 
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be included on a magnetic strip or the like separate from 
the circuit means which contains the biometric data. 

After access has been granted by comparison of the 
5 biometric data contained in the storage medium and provided 
by the user, the ability of a particular transaction to be 
finalised may depend on other parameters and not merely the 
authenticity of the user, including sufficient funds in a 
user's bank account to complete a transaction or general 
10 credit rating details in respect of the user. 

9 

In one preferred embodiment of the invention the sensor for 
access by the user to provide biometric data may be coupled 
by a hard wire system to a transaction switching network 

15 such as specialised phone lines such as those associated 
with the EFTPOS system. However, in other embodiments a 
wireless transmission system may be utilised and the sensor 
may be provided on a mobile transaction device such as that 
disclosed in our copending international patent application 

20 no- PCT/AU94/ 00247 , the contents of which are incorporated 
into this specification by this reference. Thus, the 
device in our aforementioned international application may 
be modified to include a sensor for detecting a user's 
fingerprint and that data may be transmitted over a 

25 wireless transmission system with the information on the 
storage medium for comparison, may be compared in the 
device or may be compared in the card, and an access signal 
generated for transmission over the wireless transmission 
system to a host computer so that the financial transaction 

3 0 may continue or the data in the storage medium and that 
provided by the user may be transmitted to the host 
computer or the matching process could resident in the 
reading device for comparison in the host computer so that 
the host computer can generate the access signal to 

35 continue the transaction in the event of a match. 
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Preferably the support member includes a plurality of 
separate storage locations for storing data parcels, each 
data parcel being accessible separately upon receipt of an 
authorisation code so that only data contained in one or 
5 more data parcel, which relates to the authorisation code, 
is accessible* 

This embodiment of the invention enables data parcels which 
relate to the individual who owns the card to be stored on 

10 the card such as vehicle licence details, credit card 

details, EFTPOS banking details, medical data, passport 
data and the like and to be accessible only when an 
appropriate authorisation code is presented to the card. 
Thus, at an airport, where only passport data is required, 

15 a card reader with which the card is used will present an 
authorisation code which will gain access only to the 
storage location containing the passport data so that only 
passport data can be read from the card and no other data 
contained in the card can be read. Similarly, other 

2 0 readers would be able to present authorisation codes which 

will gain access to other data parcels so that only data in 
that or those packages can be read by that reader. Thus, a 
single card can be used which contains a number of data 
parcels to allow a user to use a single card for credit 
25 card/EFTPOS transactions, as a driver's licence, passport 
or the like. 

Preferably the plurality of separate storage locations are 
included in the circuit means* 

30 

Preferably each storage location is accessible by 
corresponding separate control programs stored in the 
circuit means so that when the storage medium is used with 
a reader, the reader supplies the authorisation code to the 

3 5 circuit means to cause one or more of the programs 



WO 98/01820 



PCT/AU97/00426 



6 

corresponding to that authorisation code to access data in 
the data parcel stored in the storage location or locations 
which said one or more programs is able to access. 

5 Preferably, the circuit means is in the form of a chip and 
the chip architecture is designed in such a way as to 
ensure that each program has access only to the memory 
location corresponding to that program where data relating 
to that program is to be held. This compartmentalising of 
10 the memory is to be controlled by the circuit means 

architecture and should ensure that it is impossible for 
the software to get around this feature so that one program 
can access memory in a storage location which does not 
correspond to that program. 

15 

Preferably communication between the storage medium and a 
reader is by a secure channel is created by a public key 
cryptograph system such as RSA. This system ensures secure 
communication between the card and the reader by the 

20 exchange of public keys from a randomly generated key set 
occurring between the storage medium and the reader for 
each and every communications session. The public keys are 
used to encrypt all subsequent communicated data between 
the card and the reader. The reader which receives the 

25 encrypted communication data must use the private key of 

its key set to gain access to the data. In this fashion, a 
secure communications layer is established between the 
storage medium and the reader rendering all transmitted 
data unintelligible to a third party observer. 

30 

Once the secured communication layer has been established, 
the reader must present the identification medium with a 
digital certificate as proof of its entitlement to 
communicate with the storage medium. This should occur 
35 before transfer of any data commences. In some 
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embodiments, a message authentication code may also be used 
to validate the data throughout the duration of the 
communications session between the storage medium and the 
reader. 

5 

The digital certificate may be included in the 
authentication code which activates the program for 
accessing data in the data parcels or may be a separate 
code to the authorisation code which activates the programs 
10 for accessing data. 

A further aspect of the invention may be said to reside in 
an identification storage medium for storing data relating 
to a user, including: 

a support member; 

circuit means supported by the support member; 
a plurality of separate data parcel storage 
locations in the circuit means for storing separate data 
parcels; 

the circuit means also being for containing a 
plurality of access programs corresponding to the plurality 
of separate storage locations each for accessing data only 
in one of the storage locations corresponding to one of the 
programs ; and 

wherein, in use, when an authorisation code is 
received by the storage medium, one or more of the programs 
relating to that authorisation code is/are activated to 
cause the program to access data in one or more of the data 
parcels stored in the corresponding storage location or 
locations. 

Preferably the circuit means is also for storing biometric 
data relating to the user of the medium. 

3 5 This aspect of the invention may also be said to reside in 
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an identification system for providing access to an 
authorised user, including: 

a storage medium having a support member circuit 
means supported by the support member, a plurality of 
5 separate data parcel storage locations in the circuit means 
for storing separate data parcels, the circuit means also 
being for containing a plurality of access programs 
corresponding to the plurality of separate storage 
locations each for accessing data only in one of the 

10 storage locations corresponding to one of the programs and 
wherein, in use, when an authorisation code is received by 
the storage medium, one or more of the programs relating to 
that authorisation code is/are activated to cause the 
program to access data in one or more of the data parcels 

15 stored in the corresponding storage location or locations; 
and 

a reader for receiving the storage medium and 
supplying an authentication code to the card, the 
authentication code including a certificate which 
2 0 establishes the entitlement of the reader to communicate 
with the storage medium and an authorisation code for 
activating one or more of the programs. 

Preferably the circuit means also stores biometric data 

2 5 relating to an authorised user of the storage medium and 

the reader includes an input means for receiving biometric 
data from the user and for comparing the biometric data 
stored on the storage medium with the biometric data 
provided by the user to establish the entitlement of the 

3 0 user to use the storage medium. 

The invention may also be said to reside in an 
identification method for providing access to an authorised 
user, including storing data relating to the user in the 
3 5 form of a plurality of separate data parcels: 
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supplying an authorisation code to the storage 
locates so that the authorisation code causes only data in 
those storage locations which correspond to the 
authorisation code to be accessed* 

5 

Preferably the method also includes the step of storing 
biometric data relating to the authorised user of the 
storage medium and comparing the biometric data stored on 
the storage medium with biometric data provided by a user 
10 to establish the user's entitlement to use the storage 
medium . 

The invention in a further aspect may be said to reside in 
a mobile funds transaction device for transferring funds 
15 between one facility and another facility, including: 

an input unit having: 

a card reader for reading data in or on a 
requester's card; 

an input pad for the input of data relating to a 
20 transaction; and 

an output report device for providing details of 
the transaction; 

coupling means for electronically coupling the 
input unit to a wireless communication device; 
25 a sensor for receiving biometric data from a user 

and producing an output signal indicative of the biometric 
data; and 

wherein the input device, in use, provides an 
information signal including data relating to the 

30 transaction and data relating to the operator of the 

transaction device so that the coupling means can transfer 
the information signal to the wireless communication device 
so that the wireless communication device can, in turn, 
transmit the signal to a central facility to cause funds to 

3 5 be transferred from said one facility relating to the 
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requester to said another facility relating to the 
operator, and wherein the funds transaction device is 
mobile and portable and therefore can be moved from one 
location to another in view of the coupling means which 
5 couples the input unit to the wireless communication device 
to thereby enable the funds transaction device to be used 
without the need to be hard wired into a transmission 
system. 

10 Preferably the device includes a processor means for 

comparing the biometric data provided by the user with 
biometric data stored in the card and for providing a 
signal upon match to enable the transaction to proceed. in 
other embodiments the biometric data stored in the card and 

15 that output signal indicative of the biometric data 

produced by the sensor may be transmitted to the central 
facility for comparison and production of an access signal. 

* 

Preferably the processor also controls the card reader, the 
2 0 input pad, the output report device and the coupling means. 

The invention in a further aspect may also be said to 
reside in a funds transaction device for transferring funds 
between one card and another, including: 

2 5 first input means for receiving a first card; 

second input means for receiving a second card; 

a sensor for receiving biometric data from at 
least one user and producing an output signal indicative of 
the. biometric data; and 

3 0 processing means for comparing the biometric data 

received by the sensor with biometric data included in at 
least one of the cards and for transferring funds from one 
of the cards to the other of the cards. 

3 5 A preferred embodiment of the invention will be described. 
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by way of example, with reference to the accompanying 
drawings in which: 

Figure 1 is a view of a card embodying the 

invention; 

Figure 2 is a view of a device used in the 
preferred embodiment; and 

Figure 3 is a diagram of a system according to 
the invention; and 

Figure 4 is a diagram of a second embodiment of 
the invention* 

With reference to figure 1 a card 10 is shown which include 
an integrated circuit 12. The card 10 may be any type of 
credit or identification card such as a stored value card, 
15 smart card, access card, id card, relationship card, 

medical card, merchant card, loyalty card, proprietary card 
or transport card etc. 

The integrated circuit 12 forms a smart card chip which may 
2 0 include usual data relating to point of sale functions such 
as bank account details and the like. However, according 
to the preferred embodiment of the invention the chip which 
forms the integrated circuit 12 also include a digitised 
fingerprint of the authorised user so as to give it a high 

2 5 degree of portability and also enhanced security features. 

The card 10 is intended to be used with a point of sale or 
access device 20 shown in figure 2. However, the card 10 
could also be used with a device for card to card transfer 

3 0 of funds so that a credit balance in one person's card is 

transferred to another persoh's card without going through 
a banking facility or host computer. The device 20 
includes a card reader 22 which may be slot into which the 
card 10 is inserted for reading data in the integrated 
3 5 circuit 12. The device 20 also has a key pad 24, a display 
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26, a printer 28 and a biometric scanner 30. Thus, the 
user's fingerprint is digitally recorded in the integrated 
circuit 12 on the card 10 and is read from the integrated 
circuit 12 by the card reader 22. The user then places his 
5 or her finger on the bio-recognition scanner 3 0 so that a 
digital template of the user's finger can be obtained and 
that template is compared with that stored in integrated 
circuit 12 on the card 10 by a processor 32. If a match is 
determined an access signal is produced by the processor 
10 32. Alternatively, the comparison may take place in the 

circuit 12 on the card 10 rather than in the device 2 0 and 
if a match is established, data on the card can then be 
accessed or transferred. 

15 The bio-recognition scanner 30 may also include additional 
security features to ensure that it is actually the 
authorised user's thumbprint which is being placed on the 
scanner and not some representation. This is done by 
looking at blood flow characteristics and determining 

20 changes in colour intensity when a person's finger is 

placed on the scanner to ensure that the actual finger is 
on the scanner and not a representation of the authorised 
user's finger. 

25 As shown in figure 3, the device 20 transmits an access 
signal A to a host computer 50 associated with a bank or 
other facility so that a transaction can proceed. The 
keypad 24 may be accessed by the user or a vendor to insert 
details relating to a transaction such as the price of a 

3 0 product or amount of cash required and that data together 
with the access signal is transmitted to the host computer 
50 for further processing so that the transaction can be 
authorised by the host computer 50 and an appropriate 
authorisation signal be transmitted back to the device 20 

3 5 so that a receipt can be produced by the printer 28 or so 
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that cash can be dispensed from a dispenser (not shown) . 

The transmission of the signals A and B in figure 3 may be 
by hard wire over the conventional EFTPOS telephone system 
5 or may be a wireless transmission over the mobile telephone 
cellular network or via radio packet modem or the like. 
The device 20 may be a mobile transaction device similar to 
that disclosed in our abovementioned international 
application which provides wireless transmission of data 

10 and therefore is portable and can be used in the field 
without the need to be hard wired. The addition to the 
device of our international application is the bio- 
recognition scanner 30 which provides the digitised 
fingerprint of the user's finger for matching with the data 

15 concerning the finger template in the integrated circuit 12 
of the card 10. In other embodiments, the bio-recogiiition 
scanner 30 may be separate from the device 20 and 
electronically linked to the device. 

2 0 The device 20 therefore is for use with the card 2 0 which 

may be a smart card and includes the pin pad 24, a modem 41 
which is coupled to the processor 32, a communication 
interface device 43 connected to the modem 41 with the 
processor 32 controlling the operation of the pin pad 24, 

2 5 the display 26, the printer 28 and the scanner 30 and also 
controlling operation of the wireless communication device 
51, the modem 43 and the interface 41 to produce the 
wireless transmission of data to the host computer 50. The 
wireless communication device 51 may be a connection for 

30 connecting to a mobile telephone (not shown) so the mobile 
telephone network can be used for the transmission of data 
to the host computer 50 or the modem device 41, 
communication interface 43 and connection 51 may be 
replaced by a radio packet modem or the like (not shown) 

35 for wireless communication. 
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In the preferred embodiment of the invention the 
authorisation could also include a personal identification 
number which the user must key into the keypad 24 so that 
conventional personal identification number authorisation 
5 may be obtained in the event that the card is used with a 
point of sale device or automatic teller which does not 
have fingerprint scan facilities. As old machines are 
replaced with new machines which include facilities that 
comparison of the stored finger scan image and the image 
10 read by the terminal from the user's fingerprint the need 
to use a personal identification number can be eliminated. 

Furthermore, a single card could be used instead of 
numerous cards since the integrated circuit 12 could be 

15 encrypted with not only the fingerprint template of the 
user but also bank account details for a number of 
financial institutions and also possibly with a credit 
amount for direct cash dealings from the card without 
access to the financial institution. Thus, the card 

20 according to the preferred embodiment of this invention can 
be regarded as an electronic wallet in which you would have 
cash (the stored cash value in the integrated circuit 12) 
and various credit, debit and charge account details also 
stored in the integrated circuit 12 along with the 

2 5 fingerprint template. Normally when purchasing something 

the user can choose a method of payment by either the cash 
stored value or the credit /debit or charge facilities. 

Figure 4 shows a further embodiment of the invention. 

30 

In this embodiment of the invention the card 10 carries an 
integrated circuit 12 as per the previous embodiment. The 
integrated circuit 12 may include biometric data relating 
to the user of the card as previously described with 

3 5 reference to Figures 1 to 3 and which is accessed and 
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compared in the same way as in the embodiment of Figures 1 
to 3. 



In this embodiment of the invention, the integrated circuit 
5 12 includes a plurality of separate storage locations Dl to 
Dn for storing separate data parcels which contain data 
relating to the user. Each of the separate data parcels 
may include data relating to: 

credit card information; 
10 EFTPOS banking information; 

vehicle licence information; 

passport information, medical data; 

social welfare or security data. 

15 The above mentioned kinds of data are listed merely by way 
of example and are not intended to be complete or 
exhaustive. 

In this embodiment of the invention, a card reader 7 0 is 
20 intended to read data from only one or some of the data 

parcels mentioned above. For example, if the card reader 
70 is located at an airport for processing passport 
applications, the reader 70 would only access the data 
parcel relating to the passport information. If the reader 
25 is in a hospital or the like, the reader may access only 
the medical data. If a credit card transaction is taking 
place, the reader 70 would access only the data relating to 
the relevant credit provider which is being used by the 
user or if an EFTPOS transaction is taking place, only the 
3 0 EFTPOS data. 

In some embodiments, it may be desirable for a single 
reader 70 to access several of the data packages. For 
example, police or security organisations may access all of 
35 the data on the card from a single reader 70 and other 
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organisations or bodies may require data from several of 
the data parcels and therefore the reader 7 0 may access 
several of the data parcels. 

5 The integrated circuit 12 is shown schematically on the 

left hand side of Figure 4 and includes interface or front 
end 25 and the plurality of separate storage locations Dl 
to Dn for storing the data parcels. Each of the storage 
locations Dl to Dn has a corresponding program PI to Pn 

10 stored in the integrated circuit 12 which can access only 
the corresponding storage location. For example, program 
PI accesses only storage location Dl and program Pn 
accesses only storage location Dn. Thus, n independent 
secure parcels of information are contained with the 

15 integrated circuit 12 at any one time. The different 

parcels of data included in the storage locations Dl to Dn 
require different access codes to be presented and 
validated before encrypted data parcels are supplied from 
the storage locates Dl to Dn to the card reader 70. Each 

20 storage location Dl to Dn not only requires a different 
access code but may also involve an entirely different 
encryption key for the securing of the data in that 
location and also possibly a different encryption algorithm 
could be used in the application of that key. 

25 

The different access codes may be interpreted from the 
biometric data stored in the circuit 12. 

Each data parcel in the storage locations Dl to Dn is 
30 therefore only accessible through an independent program PI 
to Pn which resides in the circuit 12. Each program PI to 
Pn has access only to its own storage location Dl to Dn and 
is unable to retrieve information from any other storage 
location. The architecture of the circuit 12 is designed 
3 5 in such as way to ensure that each program PI to Pn has 
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access only to its own memory location Dl to Dn where its 
own data parcel is to be held. This compartmentalising of 
the memory is controlled by the architecture of the circuit 
12 so that it cannot be got around to ensure the security 
5 and integrity of the different data parcels. However, even 
if a program could access the contents of a data parcel not 
intended for use by it, it would not be possible for that 
program to use the information in any way due to the nature 
of its separate encryption. 

10 

Communication between the reader 70 and the card 10 is via 
a secure communication channel 90 shown schematically in 
Figure 4. When the card is used with the reader 70, the 
card 10 is located in a slot 74 and the user locates his or 

15 her thumb on scanner 72 so that the biometric data received 
by the scanner 72 can be compared with the data stored on 
the card 10 to establish the user's authenticity. The 
comparison most preferably takes place within the circuit 
12 on the card 10 by the reader 7 0 transmitting data from 

20 the scanner 72 to the circuit 12. However, in other 

embodiments, the comparison could take place in the reader 
70. The indication over the channel 90 is preferably under 
a public key cryptograph system with the exchange of public 
keys from a randomly generated key set occurring between 

25 the card 10 and the reader 7 0 for each and every 

communication session. These public keys will then be used 
to encrypt all subsequent communicated data between the 
card 10 and the reader 70 or its applications. The reader 
70 which receives the encrypted communication must use the 

30 private key of its key-set to gain access to the data. In 
this fashion, a secure co mm unication layer is established 
between the card 10 and the reader 74 rendering all 
transmitted data unintelligible to a third observer. 

3 5 In the preferred embodiment of the invention, the 
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architecture of the chip 12 prevents lucid examination of 
the contents of the memory locations Dl to Dn, program 
execution and encryption function. Any evasive attack upon 
the security of the card preferably causes the erasure of 
5 all sensitive information* 

Thus, the secure channel 90 is established by the card 10 
generating random key- sets each having a private key which 
is basically a code retained within the card 12 and a 

10 public key which is corresponding to that private key an 
which is passed with data to the reader 70. The reader 70 
also sends data back with the public key and uses its own 
private key to decrypt the data supplied with the public 
key supplied by the card 10. Similarly, data supplied back 

15 from the reader 70 with its public key is decrypted by the 
private key in the card 10. 

The above mentioned form of public key encryption is known 
and therefore will not be described in further detail 
20 hereinafter. 

Before any data is transmitted from the card 12 to the 
reader 70, the reader 7 0 must present a digital certificate 
which is a code which proves the authenticity of the reader 

25 70 to the card before any data is transmitted. The digital 
certificate may include or comprise the authorisation code 
which activates one of the programs Pi to Pn to access the 
data parcel contained in the storage locations Dl to Dn or 
once the digital certificate is received and verified by 

30 the card 12, the authorisation code may be a separate code 
which is then supplied by the reader 7 0 for accessing one 
or more of the data parcels in the storage locations Dl to 
Dn. 

3 5 Since modifications within the spirit and scope of the 
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invention may readily be effected by persons skilled within 
the art, it is to be understood that this invention is not 
limited to the particular embodiments described by way of 
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THE CLAIMS DEFINING THE INVENTION ARE AS FOLLOWS: 

1* An identification storage medium, including: 

a support member; and 
5 circuit means supported by the support member for 

storing biometric data relating to an authorised user of 
the medium. 

2. The medium of claim 1, wherein the biometric data 
10 is a fingerprint template of the user. 

3. The medium of claim 1, wherein the circuit means 
comprises an integrated circuit chip supported by the body 
of the credit card. 

15 

4. An identification system for providing access to 
an authorised user, including: 

a storage medium having a support member, and 
circuit means supported by the support member for 
20 storing biometric data relating to the authorised user; 

a sensor for access by a user to provide 
biometric data to the system; and 

processing means for comparing the biometric data 
stored in the circuit means with that detected by the 
25 sensor and for providing an access signal in the case of a 
match to thereby grant access to the authorised user. 

5. An identification method for providing access to 
an authorised user, including: 

3 0 storing biometric data relating to an authorised 

user on a storage medium; 

comparing the biometric data stored on the 
storage medium with biometric data provided by a user; and 

granting access to the authorised user in the 
3 5 case of a match between the data stored on the storage 
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medium and that provided by the user. 

6. The medium of claim 1, wherein the support member 

includes a plurality of separate storage locations for 
5 storing data parcels, each data parcel being accessible 
separately upon receipt of an authorisation code so that 
only data contained in one or more data parcel , which 
relates to the authorisation code is accessible* 

10 7. The medium of claim 6, wherein the plurality of 

separate storage locations are included in the circuit 
means. 

8. The medium of claim 6, wherein each storage 

15 location is accessible by corresponding separate control 
programs stored in the circuit means so that when the 
storage medium is used with a reader , the reader supplies 
the authorisation code to the circuit means to cause one or 
more of the programs corresponding to that authorisation 

2 0 code to access data in the data parcel stored in the 

storage location or locations which said one or more 
programs is able to access. 

9. The medium of claim 6, wherein the circuit means 
25 is in the form of a chip and the chip architecture is 

designed in such a way as to ensure that each program has 
access only to the memory location corresponding to that 
program where data relating to that program is to be held. 
This compartmentalising of the memory is to be controlled 

3 0 by the secure -microcontrollers hardware architecture and 

should ensure that it is impossible for the software to get 
around this feature so that one program can access memory 
in a storage location which does not correspond to that 
program. 

35 
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10. An identification storage medium for storing data 
relating to a user, including: 

a support member; 

circuit means supported by the support member; 

a plurality of separate data parcel storage 
locations in the circuit means for storing separate data 
parcels; 

the circuit means also being for containing a 
plurality of access programs corresponding to the plurality 
of separate storage locations each for accessing data only 
in one of the storage locations corresponding to one of the 
programs ; and 

wherein, in use, when an authorisation code is 
received by the storage medium, one or more of the programs 
relating to that authorisation code is /are activated to 
cause the program to access data in one or more of the data 
parcels stored in the corresponding storage location or 
locations. 

11. The medium of claim 10, wherein the circuit means 
is also for storing biometric data relating to the user of 
the medium. 

12. An identification system for providing access to 
an authorised user, including: 

a storage medium having a support member circuit 
means supported by the support member, a plurality of 
separate data parcel storage locations in the circuit means 
for storing separate data parcels, the circuit means also 
being for containing a plurality of access programs 
corresponding to the plurality of separate storage 
locations each for accessing data only in one of the 
storage locations corresponding to one of the programs and 
wherein, in use, when an authorisation code is received by 
the storage medium, one or more of the programs relating to 
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that authorisation code is /are activated to cause the 
program to access data in one or more of the data parcels 
stored in the corresponding storage location or locations; 
and 

a reader for receiving the storage medium and 
supplying an authentication code to the card, the 
authentication code including a certificate which 
establishes the entitlement of the reader to communicate 
with the storage medium and an authorisation code for 
activating one or more of the programs. 

13. The system of claim 12 , wherein the circuit means 

also stores biometric data relating to an authorised user 
of the storage medium and the reader includes an input 
15 means for receiving biometric data from the user and for 
comparing the biometric data stored on the storage medium 
with the biometric data provided by the user to establish 
the entitlement of the user to use the storage medium. 

20 14. An identification method for providing access to 

an authorised user, including storing data relating to the 
user in the form of a plurality of separate data parcels: 

supplying an authorisation code to the storage 
locates so that the authorisation code causes only data in 

25 those storage locations which correspond to the 
authorisation code to be accessed. 

15. The method of claim 14, wherein the method also 

includes the step of storing biometric data relating to the 
3 0 authorised user of the storage medium and comparing the 

biometric data stored on the storage medium with biometric 
data provided by a user to establish the user's entitlement 
to use the storage medium. 

35 16. A mobile funds transaction device for 
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transferring funds between one facility and another 
facility, inc luding : 

an input unit having: 

a card reader for reading data in or on a 
5 requester's card; 

an input pad for the input of data relating to a 
transaction; and 

an output report device for providing details of 
the transaction; 
10 coupling means for electronically coupling the 

input unit to a wireless communication device; 

a sensor for receiving biometric data from a user 
and producing an output signal indicative of the biometric 
data; and 

15 wherein the input device, in use, provides an 

information signal including data relating to the 
transaction and data relating to the operator of the 
transaction device so that the coupling means can transfer 
the information signal to the wireless communication device 

20 so that the wireless communication device can, in turn, 

transmit the signal to a central facility to cause funds to 
be transferred from said one facility relating to the 
requester to said another facility relating to the 
operator, and wherein the funds transaction device is 

25 mobile and portable and therefore can be moved from one 
location to another in view of the coupling means which 
couples the input unit to the wireless communication device 
to thereby enable the funds transaction device to be used 
without the need to be hard wired into a transmission 

30 system. 

17. The device of claim 16, wherein the device 

includes a processor means for comparing the biometric data 
provided by the user with biometric data stored in the card 
35 and for providing a signal upon match to enable the 
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transaction to proceed. In other embodiments the biometric 
data stored in the card and that output signal indicative 
of the biometric data produced by the sensor may be 
transmitted to the central facility for comparison and 
5 production of an access signal* 

18. The device of claim 17, wherein the processor 
also controls the card reader, the input pad, the output 
report device and the coupling means. 

10 

19. A fluids transaction device for transferring funds 
between one card and another, including: 

first input means for receiving a first card; 
second input means for receiving a second card; 
15 a sensor for receiving biometric data from at 

least one user and producing an output signal indicative of 
the biometric data; and 

processing means for comparing the biometric data 
received by the sensor with biometric data included in at 
20 least one of the cards and for transferring funds from one 
of the cards to the other of the cards. 
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